Kredivo Group is looking for a Senior Security Engineer to lead day-to-day Enterprise Security work. This is a hands-on role. You will own the security of our endpoints, identity, SaaS, network and cloud, and you will guide junior security engineers on the team. You will deploy and run our security platforms, remediate vulnerabilities across the fleet, and harden our corporate environment using zero trust and secure-by-default principles. You will work with IT, DevOps and Engineering across Indonesia, and international, and support Cyber Defense during incidents.
About the Job:
Cyber Defense Strategy & Leadership
- Enterprise Security BAU work and projects, and help set the team's roadmap.
- Mentor and coach SDE-1 and SDE-2 engineers, and review their configurations, scripts and remediation work.
- Set priorities by risk, and track and report security posture metrics (patch compliance, EDR coverage, vulnerability SLA, phishing click rate) to the Enterprise Security Lead.
- Write, maintain and enforce IT and Security policies, standards and procedures.
Endpoint, Vulnerability & Patch Management
- Administer and tune the security platforms: EDR, VMDR, WAF and the Email Security Gateway.
- Run vulnerability management end to end: scanning, prioritization (CVSS, CISA KEV, Ransomware), remediation and SLA tracking across Windows, macOS and Linux.
- Build and safely deploy patch and remediation automation through MDM tools.
- Keep endpoint security agents deployed and healthy across the fleet.
Identity, SaaS & Cloud Hardening
- Work with IT and DevOps to harden Cloud Directory, Google Workspace, VPN and other SaaS tools.
- Design and review IAM controls: SSO (SAML, OAuth/OIDC), SCIM provisioning, MFA, conditional access, least privilege and access reviews.
- Apply zero trust and secure-by-default models in architecture decisions for knowledge workers and developers.
- Monitoring & Incident Support, Monitor internal and external systems for threats, triage alerts, and respond to them.
- Support Cyber Defense during incidents with containment actions such as isolation, account suspension and blocking.
- Run phishing simulations and security awareness programs, and measure the results.
- Advise employees on how to keep endpoints, office AV and network infrastructure secure.
- Automate security operations and reporting using Python, Bash or PowerShell.
- Evaluate new security tools, including AI-assisted tools, and support AI Security initiatives.
- Support ISO 27001:2022 and regulatory audits (e.g. OJK) by providing evidence, remediating gaps and maintaining controls.
About You:
- At least 5 years of cyberdefense security experience, preferably in a startup or fintech environment.
- Hands-on experience deploying and managing EDR, vulnerability and patch management, DLP, network security and phishing simulation tools.
- Strong knowledge of identity and access management frameworks and protocols (SAML, OAuth/OIDC, SCIM).
- Experience securing Google Workspace, directory services, VPN and SaaS platforms.
- Experience with public cloud providers (AWS, GCP).
- Good scripting skills (Python, Bash or PowerShell).
- Knowledge of modern adversary tactics, techniques and procedures (MITRE ATT&CK).
- Experience mentoring engineers or leading small workstreams or projects.
- Good English communication skills.
#LI-AF1